Privacy policy

1Who is responsible for your data

The joint controllers are Victor Enzo Valcarenghi and Mirko Ferraris, the two people behind Project Boardgames (private individuals, not a company). They decide together why and how your data is processed.

Write to this address for any question or request about your data.

2Who helps us

Some providers process data on our behalf, only to deliver their service and under the agreements required by the GDPR:

• Hostinger International Ltd (Cyprus): hosting of this site and of the simulator, on servers in the European Union. Its mail servers also send the service emails of the simulator and the questionnaire notifications.
• Microsoft (Outlook.com): our mailbox, where questionnaire notifications and the emails you send us arrive. Microsoft may process data outside the European Union with the safeguards required by the GDPR (EU-US Data Privacy Framework and standard contractual clauses).

3What data we process, and why

3.1 Browsing the site

When you open a page, the server automatically records technical data: IP address, date and time, the page requested, the browser and the page you came from. These logs are kept by our hosting provider for security and to fix problems. We don't use them to identify you or to profile you.

3.2 Simulator access

The registration form on our pages comes from playtest.project-boardgames.com, the Artalis simulator. If you sign up we process your email, the name you choose for the game and your password, stored only in encrypted form so that nobody can read it. As proof of consent we keep the date and IP address of the sign-up and of your privacy and newsletter choices. We also record when you log in and when you start or finish a game (number of players and days), to understand how the playtest is used. We send you only service emails: address confirmation and password reset.

3.3 Newsletter

In the registration form you can tick the box to receive news about Artalis and the Gamefound launch. It is optional: you can play without it. The subscription becomes active when you confirm your address, and you can unsubscribe at any time.

3.4 Feedback questionnaire

The questionnaire collects your opinion on the game. Name and email are optional: give them only if you want us to reply, and in that case tick the box that lets us write to you. To block automated submissions we keep a code calculated from your IP address, not the address itself. Each answer is saved on our server and a copy reaches our mailbox.

3.5 Emails you send us

If you write to us, we use your address and your message only to reply.

3.6 Links to other sites

The links to Gamefound, Instagram, Facebook and, when it is online, the trailer on YouTube take you to services with their own privacy policies. Nothing is loaded from these services while you browse our pages: the trailer starts from YouTube, in privacy-enhanced mode, only when you press play.

4Legal basis

• A service you request (art. 6(1)(b) GDPR): simulator access and service emails.
• Consent (art. 6(1)(a) GDPR): newsletter, and the email you leave in the questionnaire to be contacted. You can withdraw consent at any time; what happened before stays lawful.
• Legitimate interest (art. 6(1)(f) GDPR): security of the site, aggregate statistics on the playtest, reading your answers to improve the game, replying to your emails.
• Legal obligation (art. 6(1)(c) GDPR): keeping the proof of consent.

5Who receives your data

Only the two of us and the providers listed in section 2. We don't sell, rent or hand over your data to anyone for marketing. We would share it with public authorities only if the law required it.

6How long we keep it

• Simulator access: as long as your access exists. If you ask us to delete it, we erase everything except the proof of consent required by law. Logins and games are deleted after 24 months.
• Newsletter: until you unsubscribe.
• Questionnaire answers: 24 months, then they are deleted.
• Emails: as long as needed to reply, and no more than 24 months.
• Server logs: the limited period set by the hosting provider for security.

7Cookies and similar tools

This site uses no cookies. It has no statistics or advertising tools, and the fonts come from our own server, so no request goes to Google or other third parties while you browse. If you choose a language with the selector, your browser remembers it on your device only (local storage).

The registration form and the simulator, served by playtest.project-boardgames.com, use only the technical cookies they need to work: form protection, the chosen language and, after login, the code that keeps you signed in. Technical cookies don't need consent, which is why you won't see a cookie banner.

8If you don't give us your data

You can browse the site without giving us anything. Without an email and a password we can't create your simulator access. The questionnaire works without name and email.

The simulator is meant for people aged 14 and over. If you are younger, ask a parent or guardian before signing up.

9Your rights

Under articles 15 to 22 of the GDPR you can ask us at any time to:

• tell you whether we process your data and give you a copy (access);
• correct or complete it (rectification);
• delete it (erasure);
• limit its use (restriction);
• send it to you in a readable format, to take it elsewhere (portability);
• stop processing based on legitimate interest (objection);
• withdraw your consent, for example to the newsletter.

Write to projectboardgames@outlook.com: we answer within one month.

10Complaints

If you think we are processing your data unlawfully, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority of the country where you live.

11Changes to this policy

If we change how we process data, we will update this page and the date at the top. For important changes, such as a new tool that collects data, we will tell registered users by email.